Re: Proposal "LUID"

[Jamie Lokier]

Linda Walsh wrote:
> 	I'm not talking about limits.  I'm  talking about an
> auditting ID that needs to be based on a when a user logs in
> and stays with them over any SUID or 'su' commands.

"telnet localhost" subverts this if you allow it (but you probably wouldn't).

This shows that you have to audit and possibly restrict all daemons that
permit uid changes anyway.

So why not just use the time-honoured "real user id"?

- Jamie